PT-2021-4758 · Apache · Apache Openoffice+1

Christian Mainka + 3 · Published 2021-09-23 · Updated 2021-10-19 · CVE-2021-41830

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions 4.1.10 and earlier

Description The issue is related to errors in cryptographic signature verification, allowing an attacker to manipulate signed documents and macros to appear as if they come from a trusted source.

Recommendations For Apache OpenOffice versions 4.1.10 and earlier, update to version 4.1.11 to resolve the issue.

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

BDU:2021-05476

CVE-2021-41830

Affected Products

Apache Openoffice

Openoffice

References · 9

• https://lists.apache.org/thread.html/r97d287c88881aa581f1b18cb01e2cbedc4e6eae85958491acb89b12e%40%3Cusers.openoffice.apache.org%3E · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41830 · Security Note
• https://bdu.fstec.ru/vul/2021-05476 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41830 · Vendor Advisory
• https://t.me/cvenotify/22250 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021101111 · Note
• https://t.me/cvenotify/22273 · Telegram Post
• https://lists.apache.org/thread.html/raaab8a3b91f8d7b7ba14f873b8d0fd13952c823acc3385b7a374e754@%3Cannounce.apache.org%3E · Note
• https://lists.apache.org/thread.html/raaab8a3b91f8d7b7ba14f873b8d0fd13952c823acc3385b7a374e754%40%3Cannounce.apache.org%3E · Note